This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File:                     LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier:          wlj835mPl3rwi0RKtwXuJXvqJNDFSeA2Pvle+l+kSrw=
Subject key identifier:   B3:F7:39:2C:46:D8:9F:6D:6C:E2:FC:A8:E1:0B:9E:FE:6D:5B:3A:23
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number:          82
Signing time:             Fri 23 Jan 2026 05:45:37 +0000
Manifest this update:     Fri 23 Jan 2026 05:45:37 +0000
Manifest next update:     Fri 30 Jan 2026 05:45:37 +0000
Files and hashes:         1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: rLj3hBqhGp5zih4XpXYicH81RCrciMO1QQLQlL5Ur+0=)
                          2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: 0xN1bZnq0dM0T8Sd8GlQedW1EDR0bZx7h7KAIQ4CSgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Jan 23 05:45:37 2026 GMT
            Not After : Jan 30 05:45:37 2026 GMT
        Subject: CN=69730b01-b1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:05:29:30:1f:d6:05:d7:12:6f:c1:3a:8d:
                    9e:3e:62:7b:8d:49:21:47:0c:db:1e:52:4b:13:39:
                    44:7b:51:04:2d:d4:56:29:3e:44:08:17:06:d4:4c:
                    8e:26:2e:62:2e:e3:15:df:52:4f:26:7a:72:52:3f:
                    f2:fa:ea:b4:88:c3:dc:1e:3e:06:bc:6d:3c:55:f9:
                    64:d7:16:24:38:a5:f7:34:16:fd:28:46:94:4e:fd:
                    d6:82:6a:95:eb:65:7e:a3:9f:8e:92:bd:b0:30:36:
                    bb:9a:95:32:0b:b3:6a:0c:91:b8:2c:30:8a:bd:8d:
                    ca:1f:23:fd:3e:66:c3:e4:71:a8:50:11:03:ae:ca:
                    e9:7d:56:84:5e:ea:cc:49:94:89:51:10:b2:ee:7f:
                    10:ee:4c:f5:cf:e2:57:77:10:95:90:f3:07:58:ca:
                    df:5a:4c:9a:eb:c0:57:5d:88:f8:17:82:c1:71:e9:
                    46:e6:d0:f7:66:b0:c6:c0:a7:4f:9f:b3:d1:56:4b:
                    d6:8e:cd:63:27:4e:42:f5:9d:bb:06:3a:b6:91:c1:
                    0d:92:19:68:39:a9:c4:ea:cb:1c:3c:cf:7e:80:b4:
                    dd:f0:95:f6:3b:85:28:45:89:88:1f:7a:69:2b:3a:
                    d8:12:05:43:a3:81:9c:52:3e:b8:26:e5:87:f0:1e:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F7:39:2C:46:D8:9F:6D:6C:E2:FC:A8:E1:0B:9E:FE:6D:5B:3A:23
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:42:f3:b7:23:28:f3:31:91:0f:cb:17:2d:30:68:98:ce:
         bc:73:be:3a:68:0b:f7:cb:5e:99:f6:5e:2b:22:5d:28:40:0d:
         79:11:0a:3c:09:1f:99:48:4e:21:9c:e3:46:c2:b0:28:f7:98:
         84:94:e5:a8:df:7d:3d:45:3a:b9:d0:9b:cb:5f:5d:44:bb:67:
         2a:3e:59:be:24:3f:cb:a7:a9:1b:56:66:f8:d3:02:57:ad:4e:
         2a:9a:41:29:1c:70:29:b3:cf:d4:bb:01:ff:b8:9f:89:f6:2e:
         dc:c0:68:5e:3d:43:41:7a:df:20:b7:a5:f9:e0:99:06:4e:53:
         7b:db:fa:1c:94:36:a7:63:91:ec:48:8a:dc:96:ce:59:8a:d8:
         e7:96:de:29:73:ee:d6:5f:9a:69:8f:29:e6:cd:b0:3c:ae:4b:
         03:7a:a8:8a:15:69:e1:e5:09:40:22:34:54:14:8e:53:66:fa:
         d5:a3:40:28:e8:f4:b2:34:8a:2b:7f:8e:71:87:8e:cf:5c:9c:
         7e:d8:9a:87:d5:2c:4b:a0:de:fa:9f:4a:4b:0e:39:ee:74:f8:
         d5:f1:14:4d:82:af:21:6b:e9:0f:8f:7b:71:f0:c1:64:6a:cf:
         23:34:ed:aa:f8:37:5f:7d:d0:73:53:01:45:09:83:a0:0b:ee:
         28:66:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:29 2026 by rpki-client